UK Security Researcher Who Stopped WannaCry Outbreak Arrested in US (zdnet.com)
Zack Whittaker, reporting for ZDNet: A security researcher who in May stopped an outbreak of the WannaCry ransomware has been arrested and detained after attending the Def Con conference in Las Vegas. Marcus Hutchins, 23, a British national, was arrested at Las Vegas airport on Wednesday by US Marshals, several close friends confirmed to ZDNet. A friend told ZDNet that he was "was pulled by Marshals at the lounge" after clearing security. He was briefly detained in a federal facility in Nevada until he was moved. "We went to see him this morning and we had already been moved," said the friend. Hutchins is now understood to be in custody at an FBI field office in the state. Motherboard first broke the story on Thursday. Update: A Motherboard reporter tweets, "Here's the indictment accusing @MalwareTechBlog of running the Kronos banking malware."
Update 2: New DOJ statement: Gregory J. Haanstad, United States Attorney for the Eastern District of Wisconsin, announced that on July 11, 2017, following a two-year long investigation, a federal grand jury returned a six-count indictment against Marcus Hutchins, also known as "Malwaretech," for his role in creating and distributing the Kronos banking Trojan.
Update 2: New DOJ statement: Gregory J. Haanstad, United States Attorney for the Eastern District of Wisconsin, announced that on July 11, 2017, following a two-year long investigation, a federal grand jury returned a six-count indictment against Marcus Hutchins, also known as "Malwaretech," for his role in creating and distributing the Kronos banking Trojan.
He may have helped to stop it, but it begs the question.. Did he have a hand in spreading it in the first place, or is this an unrelated charge?
The 3 WannaCry addresses used that held the Bitcoin from this exploit have been drained:
https://blockchain.info/address/13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94
https://blockchain.info/address/12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw
https://blockchain.info/address/115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn
For those who don't understand what that means:
The ransomware listed 1 of 3 Bitcoin addresses on the screen and told the victims to send Bitcoin there if they want their stuff back.
Forgetting the details of how that would work (protip: It didn't and was never meant to) these 3 addresses slowly built up as more and more people sent Bitcoin to them in hopes of recovering their files.
They have remained built up on these addresses until today.
EOM
Drill baby drill - on Mars
stays in Vegas
Don't they understand? Doing shit like this means we won't have DefCon in the U.S. any longer. Think of the hotels and all the revenue we'll be missing!!! Does Trump know about this?
Is that a roll of dimes in your pocket or are you happy to see me?
... no one seems to know.
So it's all very preliminary.
Soon enough he'll appear in front of a judge to be charged and/or a bail hearing.
If you WannaCry, go ahead and cry. Don't keep it bottled up inside.
mind blown, what is going on!?
They probably just recruited him to help thwart a Decepticon attack. Where did this boom-box come from?
Allegedly did X. But the tinfoil hatters will say that he foiled the NSA/CIA/FBI/HS plan to both infiltrate everyone's computers and to make a few bucks in the process.
Will be interesting reading either way...
The real reason he was arrested was because the security agencies were using the malware to actively try and discredit Bitcoin by dropping a massive software leak on the entire world. Had more people opted to "pay" the ransom, it would have offered proof to the powers that be that cryptocurrencies are dangerous and convertibility into real fiat should be banned.
Will such proof stop bitcoin? No, but making it more difficult to convert from BTC to fiat will drive the price way down south.
He was arrested because he foiled their plans.
He probably refused a job while in Vegas, and now they need to make good on the "or else" clause that came with it. I wonder what they are offering him now instead of what they offered before.
You are being ripped off every second of every day, so that advertisers can help rip you off even more tomorrow.
https://www.documentcloud.org/documents/3912520-Marcus-Hutchinson-Indictment.html
Is it really all that much of a surprise that he gets arrested? One of two things: he gets a job or he disappears.
I'm usually the first one to put on my tinfoil hat and throw around accusations about government agencies, but I'll need more information on this one. It's possible that Marcus is both the good guy and the bad guy in this situation.
But there was an insightful bit: The German/Finnish hacker who is initially hired to do the job is caught at the airport, and during the interrogation he is asked: Why would the number one hacker in the world risk life imprisonment by coming into the continental US?
So that's the question I have. Why would a "security researcher" enter the United States of America? What is the expectation there?
Lost on you...
-The wise argue that there are few absolutes, the fool argues that there are no probabilities.
"Begging the question" is a bad translation of petitio principii, which is itself a bad translation from Greek sources. Linguistically there isn't really a right answer here. The exact meaning is almost always clear from context, and the usage is very much moving away from the "scholarly" definition. Given that there's not an absolutely correct position on this issue, I think that it's best to avoid using the phrase oneself, and tolerate its use or misuse with others. And if the argument you are responding to does not directly hinge on a point of meaning, it's probably just as well to avoid raising the subject. Life is too short for needless semantic arguments.
Those who advocate genocide deserve every protection afforded by law, and none afforded by common human decency.
My understanding is that prior to WannaCry Bitcoin was primarily used for church tithings and to help Sarah McLachlan save those poor, poor dogs. I'm glad you brought this travesty to the Internet's attention. Now the only thing that I have to give Sarah is my body, I'll just have to take that bullet.
quid pro quo donnie, Quid pro quo
You work for us or you go to jail. Thank you NSA grade 5.3 Marcus Hutchins.
Surely if the US authorities had enough evidence they would have requested (and got) his extradition from the UK ages ago. Why wait until he is in the US?
This is crazy. Wonder if it is retaliation or if he was really involved? If he was involved, why did he go through all of the trouble to put himself in the public view? The guy did an AMA just 2 months ago: https://www.reddit.com/r/IAmA/... AND he attends Defcon? Something is fishy...
This can't be just for stopping the WannaCry virus, right? I guess if you stretch the law really far, registering this domain can be seen as "interfering with a protected computer system" since it alters the working of the virus installed on the computer, but certainly no-one would be that idiotic?
I think he is wanted for something else. I really hope so at least.
The Register reporting that asking for a sample of Kronos on twitter is the smoking gun for this grand jury indictment.
https://www.theregister.co.uk/...
The modern usage has evolved and clearly understood by most. Those complaining on that basis are demonstrating an inability to adapt.
No problem, we'll just hold Def Con in Toronto form now on if Vegas doesn't want us. Not the same casino scene, but literally everything else is better there.
This is a hacked account, for which the owner can not be held responsible.
Life is too short for needless semantic arguments.
No, it isn't !
Maybe I should make that my sig?
There are three kinds of falsehood: the first is a 'fib,' the second is a downright lie, and the third is statistics.